Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
File: MqD9Xa9E_FXXzlk452RKFyOEjDI.mft (raw, json)
Hash identifier: 7Lnj6TyQ3ZLIWgJZeUHZI+7UTqw7TEqChAMd7/bvZTQ=
Subject key identifier: 53:2C:FC:76:D7:CD:07:E9:9B:28:DC:08:D7:48:5A:66:B6:E7:E2:03
Authority key identifier: 32:A0:FD:5D:AF:44:FC:55:D7:CE:59:38:E7:64:4A:17:23:84:8C:32
Certificate issuer: /CN=32a0fd5daf44fc55d7ce5938e7644a1723848c32
Certificate serial: 019D29298FDDE793AED4137AD055BB793AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
Manifest number: 018F
Signing time: Thu 26 Mar 2026 08:01:22 +0000
Manifest this update: Thu 26 Mar 2026 08:01:22 +0000
Manifest next update: Fri 27 Mar 2026 08:01:22 +0000
Files and hashes: 1: MqD9Xa9E_FXXzlk452RKFyOEjDI.crl (hash: dXFIVzR5JZa5/4uq1faLO9526nbTXZejMolR3CniZT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:8f:dd:e7:93:ae:d4:13:7a:d0:55:bb:79:3a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a0fd5daf44fc55d7ce5938e7644a1723848c32
Validity
Not Before: Mar 26 08:01:22 2026 GMT
Not After : Mar 27 08:01:22 2026 GMT
Subject: CN=532cfc76d7cd07e99b28dc08d7485a66b6e7e203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:69:ee:69:6c:b9:b5:94:8f:34:f7:4c:d2:
5b:ba:1b:79:49:a1:af:ea:1a:d2:0a:0c:16:9f:ca:
88:71:a2:92:b9:5b:4a:72:1b:b8:57:01:5c:bc:62:
d5:06:7b:a4:be:d2:4f:0a:c0:57:af:43:58:47:03:
08:44:c8:21:08:3b:9c:33:97:07:5e:47:53:c9:24:
9b:11:10:d2:a3:6e:7e:36:80:ff:53:31:66:c8:68:
fb:bc:18:b8:7a:5a:f7:ed:cc:e6:11:0a:93:cc:c4:
54:84:c3:39:0f:50:d1:29:f1:c4:a5:3f:1b:08:8a:
d0:02:35:90:85:e2:86:1a:bd:c5:58:64:fd:0c:2e:
bd:98:c9:b8:85:12:de:0e:f8:05:10:ee:31:c8:05:
d7:c6:f2:ce:87:44:3e:9f:79:89:15:46:b8:04:e1:
02:85:98:98:ef:d2:f1:32:0d:c1:1d:7c:87:db:43:
7b:21:b4:41:b2:b0:ba:66:a2:cd:be:4f:ee:0a:3f:
d4:eb:ad:2a:e6:12:1d:e1:15:f7:d0:cd:07:4d:9f:
a4:6e:87:fb:45:03:5d:cc:af:25:f6:96:ea:e0:d2:
f1:55:64:66:10:5f:7c:74:df:71:31:ea:6e:5f:6f:
26:dc:c2:36:6f:c3:61:9d:87:b7:28:24:d7:d2:42:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:FC:76:D7:CD:07:E9:9B:28:DC:08:D7:48:5A:66:B6:E7:E2:03
X509v3 Authority Key Identifier:
keyid:32:A0:FD:5D:AF:44:FC:55:D7:CE:59:38:E7:64:4A:17:23:84:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ee:d4:a5:ed:0d:2f:07:9c:d3:72:4e:c8:9a:7c:9b:56:a7:
4e:a7:32:82:2b:18:a4:58:08:c5:af:8e:98:4e:91:c6:b2:f9:
13:1d:34:83:9d:f9:11:4c:f8:a0:37:96:23:bc:37:8f:e1:76:
20:c0:76:5c:0c:5b:19:ec:7e:9b:13:7f:19:9f:41:1f:a6:ca:
5e:28:59:c8:8b:61:71:41:aa:64:4e:d0:2f:83:c7:73:2c:29:
29:a6:bc:88:52:11:26:94:15:47:1b:81:9f:ed:c8:54:00:22:
5c:15:4a:a4:02:ef:c9:71:dc:2e:ba:39:c4:2c:94:c7:1b:99:
8b:53:3c:8b:de:38:6f:7d:a4:d5:92:1c:7e:37:ff:c5:10:d9:
db:56:0f:6c:ef:41:4b:16:5d:c3:14:42:14:35:f4:e1:33:74:
c9:0d:af:31:64:e2:bb:09:30:41:e8:47:a6:eb:b5:46:89:5d:
3c:e2:3e:a2:e1:f4:6b:9c:45:f9:cd:34:d6:20:b4:da:bb:5f:
3b:f1:6b:99:2a:0c:2a:e7:4c:33:43:bc:cf:ab:db:84:45:3b:
ea:8b:ed:67:0f:f5:ae:b5:01:30:99:b4:83:73:c4:6e:8d:fb:
1e:56:76:08:23:87:db:cd:cf:7b:0e:6f:24:ae:db:e5:1d:af:
33:bc:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:04 2026 by rpki-client